Toward information sharing: Benefit and Risk Access Control (BARAC)

Proceedings - Seventh IEEE International Workshop on Policies for Distributed Systems and Networks, Policy 2006

Volumn 2006, Issue , 2006, Pages 9-53

  Lei, Zhang ^a   Brodsky, Alexander ^a   Jajodia, Sushil ^a,b  

^a Krasnow Institute for Advanced Study   (United States)

^b MITRE CORPORATION   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BUDGET CONTROL; CONTROL SYSTEMS; GRAPH THEORY; HIERARCHICAL SYSTEMS; MATHEMATICAL MODELS; VECTORS;

ACCESS CONTROL MODEL; INFORMATION DISCLOSURE; RISK BUDGET ALLOCATION; TRANSACTION GRAPH;

INFORMATION DISSEMINATION;

EID: 33845414618     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/POLICY.2006.36     Document Type: Conference Paper

References (10)

1. D.E.Bell and L.J.Lapadula. Secure computer systems: Mathematical foundations and model. The Mitre Corporation, 1975.
2. D. E. Denning. A lattice model of secure information flow. Communications of the ACM, pages 236-243, May 1976.
3. D. E. Denning. Cryptography and Data Security. Addison-Wesley, Reading, MA, 1982.
4. N. Dimmock, J. Bacon, D. Ingram, and K. Moody. Risk models for trust-based access control (TBAC). In Proc. 3rd Annual Conference on Trust Management (iTrust), pages 364-371, May 2005.
5. N. Dimmock, A. Belokosztolszki, D. Eyers, J. Bacon, and K. Moody. Using trust and risk in role-based access control policies. In P roc. Symposium on Access Control Models and Technologies (SACMAT), pages 156-162, June 2004.
6. J. I. Hong, J. D. Ng, S. Lederer, and J. A. Landay. Privacy risk models for designing privacy-sensitive ubiquitous computing systems. Proc. Conference, on Designing Interactive Systems, pages 91-100, 2004.
7. S. Jajodia, P. Samarati, M. L. Sapino, and V. S. Subrahmanian. Flexible support for multiple access control policies. ACM Trans. Database Syst., 26(2):214-260, 2001.
8. JASON Program Office. Horizontal integration: Broader access models for realizing information dominance. The MITRE Corporation, Report number JSR-04-132, December 2004.
9. N. Nissanke and Etienne J. Khayat. Risk based security analysis of permissions in RBAC. Proc. 2nd International Workshop on Security In Information Systems, April 2004.
10. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman. Role-based access control models. IEEE Computer, pages 38-47, 1996.